Second that. Some of the world-class people I'm lucky to know in the field have no formal qualifications. However, many of them are (like myself) dinosaurs from a time when there was no "IT Security" study. You'd study something with IT and then pivot into security. These days, qualifications are getting more important, but everywhere I've worked within the past 10 years people were still open for lateral entrants.